=== petevg is now known as petevg_afk [02:02] how come I have to do 'sudo iptables-apply' each time I reboot to have my rules take effect? [02:02] On ubuntu server 16.04. "Applying new iptables rules from '/etc/network/iptables.up.rules'... done." [02:37] what's the magical boot parameter that will get me the ubuntu installer in text mode? I'm still trying to get qemu to install mini.iso from PXE [02:38] I got it to boot and fetch the kernels, but when the installation starts I get "640x480 VGA mode" and I can't see jack anymore [02:38] (I'm in a terminal) [02:38] bindi: do you have iptables-restore ? [02:39] I'm using a fw manager so I don't quite know what the "vanilla" setup does, but iirc it's all about iptables-save and then iptables-restore at boot time [02:39] bindi: are you using ufw? [02:42] drab: not using ufw [02:42] drab: yes there is iptables-restore command if you mean that [02:45] dpkg -L iptables doesn't show any systemd unit files, sysv-init files, or upstart files. [02:45] drab: got it. sudo dpkg-reconfigure iptables-persistent [02:45] it saved the current rules to /etc/iptables/rules.v4 [02:46] and claims they'll be loaded on boot [02:53] bindi: see sarnold's question, if you do a dpkg -L does it show any systemd stuff? [02:53] if it loads things at boot it must have something running at boot, either a systemd unit or an older style sysv-init [02:53] otherwise it's lying to you :P [02:54] sarnold: any clue about forcing the ubuntu installer into text mode through some kernel boot param? [02:54] The iptables-persistent package causes the following to run on reboot: [02:54] iptables-restore < /etc/iptables/rules.v4 [02:54] ip6tables-restore < /etc/iptables/rules.v6 [02:54] thanks for tracking that down bindi :) [02:55] drab: maybe novga? It's been years since I've had to fiddle with kernel command line parameters for video .. [02:55] I have vga=text and that works to get me the text stuff until the ubuntu installer loads [02:55] then I get a 640x480 video mode message and don't see abnything else [02:55] so it seems to me the ubuntu installer isn't getting the hint about text... [02:57] I also tried nofb and no joy [03:00] oh there we go, kernel command line parameters moved to Documentation/admin-guide/kernel-parameters.txt [03:03] sarnold: yeah, I think I tried most of them [03:14] holy cow, it finished... blind preseed [03:14] only thing is, somehow it's broken and not running sshd by the time preseed finishes late_command [03:14] and I can't see why [03:14] maybe give it a minute or something [03:14] but at least I have a pxe'booted and installed qemu image that boots fine [03:15] I waited for a bunch and it actually saw the port as open [03:15] ssh_exchange_identification: read: Connection reset by peer [03:15] that's what I was getting [03:15] vm instances often have rubbish entropy available so the key generation on first boot cna take forever [03:15] this was even first boot, it was at the end of the preseed [03:16] what I'm trying to do is install mini, then chroot into /target, run sshd [03:16] and then use ansible to complete the installation [03:16] and only then reboot [03:16] it works on baremetal and even virtualbox actually [03:16] not sure what's going on with qemu [03:16] the preseed must have worked since ssh was up, hence the above error [03:17] during install I was just getting connection refused [03:45] ok, found the problem [03:45] well, what's wrong, not quite sure why it's happening in qemu and not on baremetal... [03:46] but the chroot is weird and it needs some helping to set up and somehow that setup fails on qemu [04:24] how to audit the processes running on sar log on range time 02:31:09 PM - 02:45:11 PM when i have sar snip like this http://vpaste.net/d1O98 ? [04:46] hi [04:46] I have lots of process running with same name on task manager ,consuming lot of memory [04:47] https [04:47] httpd sry [04:47] i want to stop this httpd populating my ram [04:47] anyone?? [04:50] wht d hell [04:54] good morning [04:55] grv stop/restart/rconfigure your apache? [04:55] ah no more here [05:00] httpd that's must be a non ubuntu servers right, grv? [05:03] let's say i want to point user to view http://stackoverflow.com/questions/4480304/how-to-set-http-headers-for-cache-control but on specific solution on date answered Oct 5 '11 at 15:55 how to point to the page directly [05:05] fishcooker: there is a little "share" button on the bottom left of each answer [05:57] cool thankyou cpaelzer [06:17] Good morning. [06:22] Good morning, should I go with the default openvpn packages i Xenial?(5 y support) or should I get the ones from openvpns repo? Stability and security is my main concerne(bug fixes etc.) === led2 is now known as led1 [10:08] how can I limit the console resolution of ubuntu server to 1280x1024 [10:08] now, it is 1600x1090 [10:09] sorry, i'm sleeping, it is hd: 1920x1080 === kooldavi_ is now known as kooldavi [11:18] d [11:21] https://gist.github.com/anonymous/c8ac84e861d0bcd93337a2926acccce1 this is hwoing me the docker installations. However when I do: apt-get remove docker-engine it says: [11:21] Package 'docker-engine' is not installed, so not removed [11:21] any ideas on how to remove it? [12:37] hello all [12:38] Is anyone interested in a nova newton refresh > [12:38] ?? [12:38] I need 14.0.5 [12:38] to upgrade from Mitaka [12:38] because this thing here is only in 14.0.5 https://review.openstack.org/#/c/438630/ [12:38] and the current Ubuntu package is 14.0.4 [12:39] coreycb: is anyone working on refreshing the nova package for newton or I can submit a merge request ? [13:47] zioproto, you might want to check with jamespage on the nova newton refresh [13:48] jamespage: ping ? [13:48] zioproto: I'll put it on my list [13:49] I have some other backlog to clear first, and then I'll look at the set of newton minor version updates [14:05] jamespage: I will send you a Merge Request on LP. I am building the package right now [14:05] it is a easy refresh, non of the debian/patches have been merged [14:18] rbasak, https://code.launchpad.net/~smoser/uvtool/+git/uvtool/+merge/322217 any comments ? [14:56] smoser: sorry, I'd forgotten all about that. Looking now. [15:04] moin [15:05] anybody around familiar with what it takes to force the installer into text mode? somehow the boot process is text, but when the debian-installer fires off it seems to switch to 540x480 vga mode [15:05] this is not a problem on baremetal, but it means no output on qemu running in text mode [15:05] for whatever reason passing novga, nofb, nomodeset, text on the kernel command line makes no difference [15:07] also, and sarnold maybe here you have some input/historical data point, /usr/lib/qemu/qemu-bridge-helper seems to be setuid on other distros to allow users to start a kvm instance and get a valid tap device [15:07] however on ubuntu it's not setuid and so I get an error starting the instance if I try to use that helper to get the tap interface going [15:07] I'm wondering if that was a deliberate choice at some point [15:09] Aison: it's the vga parameter in grub cmd line, forgot if it's 791, just check the modes [15:09] Aison: http://pierre.baudu.in/other/grub.vga.modes.html [15:09] looks like it's 793-795 depending on color depth you want [15:11] drab, i found many solutions, like video= or also vga= somehow grup enters into this resolution, but while booting, it suddenly changes to 1080p [15:13] brb [15:13] Aison: ok, so maybe we're having the same problem after all... I thought it was the installer triggering something but maybe not [15:13] in my case there's no grub tho, it's booting a kernel directly specified in the pxe menu [15:19] jamespage: I found a new nova bug, fixing it with nova-devs, looks like there will be a new nova release in newton soon [15:19] jamespage: wait to refresh the package [15:52] jamespage: https://bugs.launchpad.net/nova/+bug/1684861 [15:52] Launchpad bug 1684861 in OpenStack Compute (nova) "Database online_data_migrations in newton fail due to missing keypairs" [Undecided,New] [15:52] this bug has roots in the kilo to liberty upgrade [15:52] https://bugs.launchpad.net/nova/+bug/1511466 [15:52] Launchpad bug 1511466 in OpenStack Compute (nova) "migrate flavor data impossible" [Medium,Confirmed] [15:53] because this one is still open I assume most operators used that workaround to upgrade === poster is now known as Poster [16:27] __Yiota, how goes the battle? [16:27] <__Yiota> good, not sure how to optimize the cache on AWS === lutostag_ is now known as lutostag [17:42] there's no maas packages for centos yet right? [17:42] * hallyn rolls up his sleeves to try out oVirt [17:42] rharper: if you were stuck with centos hosts, what would you use for something where you want to quickly spin up vms? [17:43] on my own hosts i use uvt-kvm; elsewher ei'd use openstack... but on centos... [17:43] i suppose i *could* just use libvirt and virt-install [17:43] but i'm hoping you'll tell me i can install maas :) [17:44] hallyn, ovirt is still a thing? [17:47] 185 folks in #ovirt on oftc [17:47] I guess it's still a thing :) [17:49] ppetraki: i wondered that too :) [17:49] sarnold: suppose i should make that 186. if i must [18:00] hallyn: hrm, virt-install with isos I suppose [18:01] hallyn: but I Think there are centos cloud-images, in which case, you could look at our xkvm wrapper for qemu cli; xkvm is inside the curtin project [18:22] there's a lxd image for centos === Aison is now known as Aison|stinksauer === Aison|stinksauer is now known as Aison === poster is now known as Poster === lutostag_ is now known as lutostag [21:59] i'm making a test installation of ubuntu 17.04 and I notice quite some differences in the sshd_config compared to the previous versions of ubuntu [21:59] is there anything to consider? [22:05] Aison: to consider regarding what? [22:05] what's the deal with ubuntu and libvirt? libvirt seems "production ready" on RH land, but ubuntu seems to be heavily invested in containers (and lxd) [22:06] tomreyn, e.g. the hostkey stuff is disabled like: #HostKey /etc/ssh/ssh_host_rsa_key [22:06] are ubuntu server ppl using libvirt in prod? and does anybody run containers with it? [22:06] drab: afaik the only real missing piece for libvirt on xenial is lack of making new zfs zvol pools [22:06] is it disabled because it is not in use, or is it disabled because it is the default value [22:06] Aison: default value [22:06] sarnold: ah, ok, that I can live with [22:07] drab: almost no one in ubuntu-land uses libvirt-lxc; but libvirt-qemu is used all the time [22:07] what really holds me back is the container stuff, which seems second class big times [22:07] ok [22:07] that's the impression I had, yeah [22:07] yeah; for containers ubuntu folks use lxc or lxd [22:07] depending upon taste [22:07] drab, thx [22:07] I guess there's loads of folks who use docker too, but i'm more familiar with people using lxd [22:08] and that's what's kind of throwing me off... I don't quite want to invest to learn both frameworks [22:08] yeah, no docker here, thanks [22:08] also it seems that to make those play along (libvirt and lxd) could be potentially troublesome [22:08] sharing bridges, pools, etc, would prolly have to separate everything [22:08] which means running a kvm instance and a bunch of containers on the same host trouble [22:09] but then running qemu manually is being a real pain too... [22:09] drab: libvirt-lxc is sadness [22:09] drab: just an fyi [22:09] there doesn't even seem to be any provision to strt qemu guests at boot other than hacky home-baked scripts [22:09] nacc: yeah, like I said, that's the impression I got [22:09] hence staying away from libvirt and investing in lxd [22:09] drab: i'm stating it as more than your impression :) [22:10] hah, ok [22:10] libvirt is still very reasonable to use for kvm guests [22:10] point taken [22:10] and i think there are many folks that use libvirt and lxd [22:10] but then I have all this nfs-kernel-server which containers are no good for [22:10] mmmh ok, I have not see much if any of that [22:10] they can probably even be on the same bridge [22:10] Aison: yes, /etc/ssh/ssh_host_rsa_key is generated by default (unless present) on sshd startup [22:10] ie blogs or docs mixing the two, sharing bridges and pools etc [22:11] drab, tomreyn thx [22:12] also for some reason I don't seem to be able to get taps created without sudo even after setuid'ing qemu-bridge-helper === god is now known as Guest48918 [23:50] rharper: ... or maybe i'll just wait for someone to install ubuntu on the hosts :) [23:50] * hallyn looks for the cloud images